Remote Audit: During and Beyond Covid-19

Remote Audit:
During and Beyond Covid-19
Presented by:
Vinod Kashyap
NextGen Knowledge Solutions Private Ltd.
NIRC of ICAI
Webinar – November 20, 2020

Introduction
• Chartered Accountant & Information Systems Auditor
• UN/CEFACT Expert
• Convenor, BIS Sub-Committee on “Audit Data Services”
• Member, BIS Committee on Accounting and Finance Services
• Member, ASSOCHAM – National Council for Internal Audit & Risk
Management
• Member, ASSOCHAM – National Council for Company Law &
Corporate Governance
• Member, Board of Advisors, MITCOM, MIT-ADT University
• First & Only Chartered Accountant from India to speak at :-
(i) World Continuous Auditing & Reporting Symposium
(ii) Transformative Technologies Workshop (AAA Annual Conference)

4
Agenda
o Impact of Covid-19
o Remote Auditing
o Role of Audit Committee
o Potential Risk of Fraud During Pandemic Time
o Q & A

Covid-19 is, first and foremost, a global humanitarian
challenge.
Thousands of health professionals are heroically battling the virus, putting their own
lives at risk. Government and industry are working together to understand and
address the challenge, support victims and their families and communities, and search
for treatment and vaccine.
Companies around the world need to act promptly.
Senior leaders need to understand the Covid-19 situation and how it may unfold, and
take steps to protect their employees, customers, supply chains, and financial results.
Source : McKinsey

7
Covid-19’s Widespread Impact on Mental Health
Source : Statista
Share of adults who experience stress, anxiety or sadness that was difficult to
cope with alone during the pandemic.

8
Covid-19 could push half a billion people into poverty
Additional people in poverty due to a 20% income drop caused by a Covid-19 recession.
Source : Statista
*Poverty level : People earning below $5.50 per day

9
How Covid-19 is Changing The World ?
Economy Slow Down We will travel again, but it will be different Learning will learn from Covid-19
The office will be re-invented The future of retail is online and contactlessPeople will move less to chase job

10
Impact of Covid-19 on use of technology
Particulars Pre-Covid-19 During Covid-19 Impact of Technology
Communication
with colleagues
Face-to-face communication
E-mail, if required
Audio calls, e-mails, Skype calls, WhatsApp calls,
Google duo calls, Jio Meet / Zoom meeting etc.
• Use of technology has
grown overnight
• Importance of data
security, personal data /
information protection has
increased
• Technology has eliminated
the need for personal
meeting to a great extent
• Need for internet and
automation has increased
• Savings in operational cost
Trainings /
Workshops
Face-to-face, Classroom
mode, projector screening,
Laptop screening
MS Teams / Zoom / Skype / Google Duo / WebEx /
Slack / Blue Prizm / Jio Meet.
Access to data and
collaboration
Work on data stored on
entity’s server / computer
system.
Access to data through VPN
Access to data stored through VPN / Cloud server
/ online drives. Collaboration through remote
access tools such as Team Viewer / Any Desk /
Windows Remote Desktop.
Documentation Hard copy or soft copy as per
entity’s policy
Soft copy of document is saved on laptop / PC /
Hard drive. Later on, it’s saved on entity’s server /
common drive using VPN or Cloud server or Online
Drive.
Communication
with other
stakeholders
Audio calls, emails, physical
meetings, MS Teams/ Zoom /
Skype / WebEx
Audio calls, emails, physical meetings, MS Teams/
Zoom / Skype / WebEx / Slack / Blue Prizm / Jio
Meet.
During such unprecedented times, it’s through technology, the world economy has survived economically to whatever extent it
could. Non-existence of technology might have led to disruption of the world economies in a metamorphic manner.

11
Is Working From Home Here to Stay ?
Corona virus crisis has dramatically transformed the way companies operate - and although one day
somethings may go back to normal, remote working is here to stay.
Source : CITY A.M.

12
Is Working From Home Here to Stay ?
% of respondents who would like to change their work
schedule after Covid-19 has been contained.
Based on a survey of 1,200 full time employees in the
U.S. conducted April 16-17, 2020.
Source : Statista

14
Remote Audit
Remote Audits are paperless , electronic audits that are conducted without face-to-face interaction between
auditor and auditee. All data is exchanged in electronic format such as MS Word, MS Excel, PDF, XML, Text
Files, EDI files etc.

15
Remote Audit Cont.…
Benefits
• Restoration of much needed sense of normalcy
• Cost savings and efficiency – Travelling, Lodging and
Boarding expenses, cost of storage of physical records
• An expanded pool of available auditors
• Expanded coverage
• Expanded use of specialists
• Improved performance with data analysis
• Working papers & evidence can be linked with audit report
• No auditing standards, rules or regulations that prevent
use of paperless auditing systems
Limitations
• First hand observations can’t be replaced
• Virtual Audit makes it hard to build rapport with auditee
• The lack of in-person interaction opens other
opportunities for fraud

16
Understanding The Challenge
Maintaining Quality Standards Testing New Assurance Methods Overcoming Physical Barriers
Understanding The Client Perspective Ensuring Data Security

17
Re-engineering The Audit Process
Internal Control Testing
• Auditing Standards require
auditors to gain an understanding
of Internal Controls and testing to
determine whether controls are
adequately designed & effective
• If employees are working from
home, organization’s control
environment and risks may have
changed from prior periods
Inventory Observations
• Auditors usually visit the actual
facilities to observe physical
inventory counting procedures
and compare independent test
counts to the organization’s
accounting records.
• Stay-at-home policies during the
pandemic may prevent both
external auditors and personnel
from conducting physical counts.
Management Enquiries
• Auditors are trained to observe
body language and judge the
dynamics between co-workers as
they interview personal to assess
fraud risks.
• When possible it’s best to
perform fraud discussion in
person.

18
Investing in Technology
Cloud Based Technology
Internet
File Sharing Platform

19
Investing in Technology
Communication Platforms

20
Investing in Technology Cont.…
Communication Platforms – Virtual Meeting

21
Electronic Working Papers
Electronic workpapers refers to any program that auditors can use to compile and
archive audit documentation. The core functionality is the ability to upload your
work directly into the program, where you can then organize it, record review and
approval with electronic signatures and date stamps, back up your work and lock
down the finished product.

22
Collaboration Portals
Collaboration portals are used to assist audit teams with communicating and exchanging information with audited entity
management. They provide a more secure method of transferring data than email. Collaboration portals may be integrated into
the audit platform. The status of information requests is visible, improving project management on both sides.

23
Remote Audit Process
Planning
• Stakeholders planning meeting
• Discussion on the scope, schedule and
approach for remote audit
• Information to be shared – how and
when ?
• Technology to be used (Cameras,
Drones , Telepresence etc.)
• Authorization required
• Restricted areas
Document Review
• Prepare and upload documents on a file
sharing platform (Share Point, Google
Drive , Shared Device)
• Auditee will need time to convert paper
records and database storage system into
reviewable format (PDF) or input format
required for data analytics
• Take notes and write down questions to
be asked
Site reconnaissance
• Most challenging aspect of remote auditing
• Use live two way communication technology,
including live streaming
• Recorded video and still photographs where
Wi-Fi is not available
• During document review, auditor should
compile a list of areas of concern: e.g. active
facility access points, secure & restricted
areas, videos of vehicles and personal
screening etc.

24
Remote Interviews
• Scheduling video calls with key persons
using available technology e.g. Skype,
Zoom, Google Hang Outs
• Prepare list of questions to be asked
and points where additional
information is needed
Closing Meeting
• Same as closing meeting in face-to-face
audit
• Should be conducted one two days
following remote interviews
• Compile preliminary draft audit findings
for discussion in meeting
• Resolve any questions or concerns
Audit Report
• Finalize audit report after considering
feed back/answer received on
preliminary audit findings in closing
meeting
Remote Audit Process Cont.…

25
Audit Evidence (SA-500)
Audit evidence – Information used by the auditor
in arriving at the conclusions on which the
auditor’s opinion is based. Audit evidence includes
both information contained in the accounting
records underlying the financial statements and
information obtained from other sources.
Audit Evidence
• Information used by the auditor in arriving at the
conclusions on which the auditor’s opinion is
based. Audit evidence includes both information
contained in the accounting records underlying the
financial statements and information obtained
from other sources.
• Sufficient and appropriate audit evidence.

26
Audit Procedures for Obtaining Audit Evidence
Procedure Method
Inspection of records or documents Pull sample of records and trace, verify/match
Inspection of tangible assets Physical inventory, walk through, open boxes
Observation Sit with workers and observe
Inquiry Written or oral interviews
Confirmation Verify account balance
Recalculation Exact and recalculate figures to verify
Re-performance Re-perform procedures to verify
Analytical procedures Scanning and statistics
Source : Appelbaum and Nehmer
Note: Audit Procedures (SA – 500) prescribes similar audit procedures for obtaining audit evidence.

27
Audit Evidence (SA-500)
Audit evidence – Information used by the auditor in arriving at the
conclusions on which the auditor’s opinion is based. Audit evidence
includes both information contained in the accounting records
underlying the financial statements and information obtained from
other sources
Audit Evidence
• An emergent need has been felt for quite sometime for auditing
standards to recognize the use of “automated tools and techniques”
(Audit Data Analytics (ADA), Artificial Intelligence (AI), Machine
Learning (ML), Robotic Process Automation RPA), and Remote
Observation Tools) which are being used for planning or performing
the audit.
• AICPA has issued a new standard on Audit Evidence (AU-C 500) which
recognize the use of “automated tools and techniques” in audit.
• IAASB has issued Project Update on Revision of ISA 500 in September
2020.
• SA 500 “Audit Evidence”, which was issued over a decade ago, doesn’t
recognize emerging technologies and tools used by auditors in
collection of audit evidence.

28
Inventory Verification
Companies (Auditor’s Report) Order, 2016 (CARO)
Para 3 (ii) whether physical verification of inventory has been conducted at reasonable intervals by the
management and whether any material discrepancies were noticed and if so, whether they have been properly
dealt with in the books of account;

29
Source : McKinsey
“If you can not count the inventory for whatever reasons physically, I would be
worried about that. History tells us that when the auditor is not able to observe and
count inventory bad things happen.”
Lynn E. Turner, Ex-Chief Accountant, Securities Exchange Commission

30
Lapses in basic on-site checks have led to major fraud cases
ZZZZ Best Co.
• A carpet cleaning and restoration company
• The company went public in Dec 1986 and was valued at over
$300 Mn.
• CPA firm Ernst & Wittney , now Ernst & Young, audited the
financial statements that were part of Prospectus for IPO
• Created a fake contract site as part of an elaborate effort to
dupe it’s auditors
• Within 7 months of IPO, the company was bankrupt and it’s
assets were auctioned for $64,000 (approx.)
Crazy Eddie
• A consumer electronic chain in tri-state New York
• Went public in 1984 and a long lasting financial statement fraud
was not discovered until 1987
• Overstated inventory to inflate reported profits
• Engineered a $120 Mn rip off
• New management of company in 1987, reviewed inventory and
disclosed shortfall in inventory on hand to the tune of $65 Mn
(approx.)
• Auditors didn’t detect fraud

31
MiniScribe Corp.
• Innovator of high-capacity hard drives in the 80s
• Masqueraded bricks as disk drives to confuse auditors
• Sending boxes of bricks to warehouse to simulate production
• False financial reporting, interference with auditors
• Created an automated computer program, “Cook Book” to
falsify inventory levels and sale
Ann Taylor
• A clothing retailer
• Didn’t write down excess inventory
Lapses in basic on-site checks have led to major fraud cases Cont.…

32
Roll Forward and Roll Back
• Inventory verification after travel
restrictions are over
• Additional testing on sales & purchase
subsequent to the close of FY
Video Observation
• Is it permissible under auditing standards
not to do physical verification of inventory?
• Live streaming of inventory verification
being carried out by auditee staff with
location tracking information
• Recorded video will have authenticity issues
for being used as audit evidence
• Challenges involved in evaluating physical
condition of inventory
Additional Supporting Evidence
• Using image recognition software
• Inventory price-testing to address valuation
assertion and also provide some evidence on
quantity in stocks
Inventory Verification During Covid-19
Source : Deniz Appelbaum & Miklos A Vasarhelyi

33
Inventory Verification During Covid-19 Cont.…
RFID Tags Tagging Auditing
Image Recognition Software
• The App count things of the object in picture with touch
of a button
• Provide customized CSV files relevant for the business
Real-time Inventory Verification Using RFID Tags
• Using RFID Tags, inventory audit can be conducted on real-
time basis via a handheld device, which connects to a
server.
• Limitation : RFID Tags may not tag everything

34
Evaluation of Property, Plant & Equipment
Drones
• Fit into audit procedures used to collect & gather evidence
• Provide evidence of existence and valuation assertion in
certain circumstances
• Assist in difficult-to-reach places like roof tops, agriculture
farms etc
Live Video Streams
• Live streaming provide auditor with a real-time view of the
site, activity or document
• Evaluation of physical condition of Property, Plant &
Equipment
• Verifying the content of box could be done through AFV
process
Source : Deniz Appelbaum & Robert A Nehmer

35
Audit Risk Assessment During Covid-19
Fair Value
• Securities market and pricing
significantly affected by lock down
• Guidelines issued by Accounting bodies
regarding valuations
• Critical review of disclosures on
valuations
• Due consideration of market volatility
and lack of liquidity
Going concern
• Impact of Broad shut down of economy
• Review of debt level , alternative source
of revenues, strategic plan , cash flows
before and after pandemic
Subsequent events
• Events that provide evidence of
conditions that existed at the date of
Balance Sheet
• Events that provide information about
events that did not exist at the date of
the balance sheet but arose after that
date
• Impact on financial statements
Source : Deniz Appelbaum & Miklos A Vasarhelyi

36
Guidance on Auditing During Covid-19 & Remote Audits

38
Source : Richard Chambers
Audit committees must be vigilant, agile, disciplined,
and engaged. That will allow them a timely and
coherent understanding of the continuously evolving
operating environment and exhibit confidence in
their reporting, disclosures, and conformance with
regulatory, legislative, and ethical expectations.
Role of Audit Committee

39
Recommendations For Audit Committee
Stay informed
Maintain a timely and clear
understanding of the continuously-
evolving operating environment and
how it may impact organizational
objectives and performance.
Communicate and collaborate
Adopt a multi-disciplinary approach to
existing oversight of internal and
external audit and reporting through
dynamic communication and
collaboration.
Leverage available expertise
Seek qualified and reliable assurance
and advice on management
evaluations of, and response to, the
organization’s continuously evolving
risk and risk profile.
Source : IIA

40
Recommendations For Audit Committee Cont.…
Promote continuous improvement
Encourage innovation and change to
address vulnerabilities and to build
resilience, strengthening the pursuit of
value creation.
Think holistically
Adopt a broad perspective of the
organization and it’s environment
across both financial and non-financial
goals, considering interconnectivity
with other organizations, internal and
external interdependencies, and the
central importance of people.
Embrace technology
Optimize the performance of the audit
committee through the use of
technology and flexible work practices.
Source : IIA

41
Audit Committee Perspective: Understanding Related Risks
auditor’s opinion is based. Audit evidence
includes both information contained in the
accounting records underlying the financial
statements and information obtained from other
sources.
Questions to discuss with auditors
➢ Will additional time be needed to get the audit
work done remotely? What complexity does
working remotely add to the audit?
➢ Will working remotely affect productivity of audit
engagement team members? If so, does the audit
plan need to be updated, and do fees need to be
revisited?
➢ Has remote work affected the company’s ICFR? If
so:
✓ Is the auditor including new controls in their
assessment, or evaluating changes to existing
ones?
✓ Has the auditor identified any concerns with
respect to segregation of duties?
Source : PCAOB

42
Audit Committee Perspective: Understanding Related Risks Cont.…
sources.
➢ If a review of the issuer’s interim financial
information has been completed already, are there
any lessons learned that can be applied to the
year-end audit?
➢ Are there any technology enhancements or
collaborative tools that should be considered to
support longer-term remote work?
➢ Engage with the auditor and management to
discuss potential challenges to a timely completion
of the audit. Review and discuss the timeline for
the phases of audit work.
Source : PCAOB

43
Audit Committee Perspective: Understanding Related Risks Cont.…
sources.
➢ Determine a good cadence for communications
that include both the auditor and management so
that the audit committee receives the information
it needs in a timely manner, while also considering
the additional demands on auditors and
management during the pandemic.
➢ Discuss any changes to the audit plan with the
auditor, including changes to areas of focus and
how the auditor plans to address areas of new or
modified risk. Discuss if there are changes to how
the auditor will identify and test internal controls.
➢ Discuss which disclosures may need to change as a
result of Covid-19.
Source : PCAOB

44
Potential Risk of Fraud During Pandemic Time

45
Auditors Duty for Detection of Fraud
Ever since the early 90’s, there is an accepted practice that auditors are not there to find fraud…so who is ?

46
Auditors Duty for Detection of Fraud Cont.…

47
Auditors Duty for Detection of Fraud Under CARO 2020
Standard on Auditing (SA 240)
….does not lay down this as the auditor’s responsibility. It only says
that if you stumble upon some information where you can see
symptoms of fraud, then you need to go deeper into the matter.

02
03
01 Pressure
01
Opportunity
02
Rationalization
03
Motivation behind the crime : economic downturn and
entity viability, employee job safety
Internal control changes and breakdown
Only helping entity survive, I will payback when things
become normal
The Fraud Triangle

49
Fraud In The Wake of Covid-19
Source : ACFE

50
Top 5 Fraud Schemes Due To The Corona Virus
Audit evidence – Information used by the
auditor in arriving at the conclusions on
which the auditor’s opinion is based. Audit
evidence includes both information
contained in the accounting records
underlying the financial statements and
information obtained from other sources.
“This pandemic has created an
unprecedented situation for countries,
organizations and individuals around the
world”, said Doris. As anti-fraud
professionals, our members have seen fraud
spike after natural disasters and in recession
before, but the amount of fraud we can
expect to see in the coming months and
years as a result of Covid-19 is truly
staggering.
Source : ACFE

51
Internal Controls to Reduce Fraud Losses
Robust Code of Conduct Strong Internal Audit Department
Management Certification of Financial Statements Management Reviews of Internal Controls,
Processes, Accounts and Transactions
Source : ACFE

52
What you can do now ?
Review for
control
weakness
Update your
current
operations
Review code of
conduct
IT Hardening
Proactive
monitoring of
financial trends
Assess and
promote culture
Fraud risk
assessment
Reallocate
resources
Fraud hotline Surprise audits

“No matter how complex things are,
basically everything is simple.”
Questions

Vinod Kashyap
Email: vinod.Kashyap@nextgenknowledge.com
Tel # +91-96544-55392

Remote Audit: During and Beyond Covid-19

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Remote Audit: During and Beyond Covid-19

Similar to Remote Audit: During and Beyond Covid-19 (20)

More from Vinod Kashyap

More from Vinod Kashyap (15)

Recently uploaded

Recently uploaded (20)

Remote Audit: During and Beyond Covid-19